CVE-2024-10449-patch

CVE-2024-10449 的补丁 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 步骤: 从该仓库下载修补后的 loginAction.php 文件 https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php 并用其替换存在漏洞的版本。 编辑修补后的 loginAction.php 文件，填写你的数据库信息（第5/6/7/8行）。...

EUVD-2019-19819

Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with time-based SQL injection payloads in the Email field ...

CVE-2019-25535

Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with time-based SQL injection payloads in the Email field ...

CVE-2019-25541 Netartmedia PHP Mall 4.1 Multiple SQL Injection

Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in...

CVE-2019-25537 Netartmedia Event Portal 2.0 SQL Injection via loginaction.php

Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with malicious SQL payloads in the Email...

CVE-2019-25537

Netartmedia Event Portal 2.0 is affected by a time-based blind SQL injection in the Email parameter of loginaction.php, exploitable without authentication. Attackers can send crafted POST requests to extract sensitive database information. The vulnerability enables attackers to manipulate queries...

CVE-2019-25532

CVE-2019-25532 affects Netartmedia Jobs Portal 6.1. The connected documents describe an SQL injection vulnerability where unauthenticated attackers can inject SQL through the Email field in loginaction.php via POST requests, enabling extraction of sensitive data or bypassing authentication. The r...

CVE-2019-25531

Netartmedia Deals Portal is affected by an SQL injection in the Email parameter of loginaction.php, allowing unauthenticated attackers to manipulate queries and potentially extract data or bypass authentication. The vulnerability is rated HIGH (CVSS 3.1: 8.2, NETWORK/LOW/PR:N/UI:N, with confident...

CVE-2019-25531 Netartmedia Deals Portal Lastest SQL Injection via loginaction.php

Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive information or bypass authenticatio...

CVE-2019-25531 Netartmedia Deals Portal Lastest SQL Injection via loginaction.php

Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive information or bypass authenticatio...

CVE-2019-25537: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with malicious SQL payloads in the Email...

CVE-2019-25531: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive information or bypass authenticatio...

CVE-2019-25533: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia PHP Business Directory 4.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to the loginaction.php endpoint with crafted SQL payloads in the...

CVE-2019-25541: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in...

CVE-2019-25535: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with time-based SQL injection payloads in the Email field ...

CVE-2019-25532: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia Jobs Portal 6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with crafted SQL payloads in the Email field to extract...

CVE-2025-63742: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid...

CVE-2024-10449 Codezips Hospital Appointment System loginAction.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2024-10449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

Codezips Hospital Appointment System SQL注入漏洞

Codezips Hospital Appointment System is a Codezips open source hospital appointment system. Codezips Hospital Appointment System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter Username in the file /loginAction.php that can lead to SQL injection...